Privacy policy

in which we inform you, as a visitor to our website and a user of our services, about our company’s data processing and data protection regulations.

1. What principles do we follow in our data processing?

Our company follows the principles below in its data processing:

• We process personal data lawfully, fairly, and in a transparent manner for you.
• We collect personal data only for specified, explicit, and legitimate purposes and do not process them in a manner that is incompatible with those purposes.
• The personal data we collect and process are adequate, relevant, and limited to what is necessary for the purposes of the data processing.
• The legal basis for data processing may be your prior, voluntary, and informed consent, or in certain cases, our legitimate interest (for example, contact and customer support through quote request forms).
• We ensure that the data we process is accurate and, where necessary, kept up to date; we will promptly erase or rectify inaccurate personal data.
• We store personal data in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed.
• We apply appropriate technical and organizational measures to ensure the security of the data against data loss, unauthorized access, or unlawful data processing.
• We may transfer personal data outside the EEA to our data processors (for example, Microsoft 365, Mailchimp, Google Analytics, Hotjar service providers), provided we ensure this in accordance with legal regulations and GDPR contractual guarantees (standard contractual clauses, SCC).
• When using online tracking technologies (cookies), we request prior, active (opt-in) consent, especially for tools used for visitor and behavior analysis.
• The purposes of data processing include, among others, handling quote requests, email communication, telephone follow-ups, visitor and behavior analysis, and sending newsletters.

2. Who are we?

Company name: Unicorn CriticalTech Zrt.
Registered office: H-2040 Budaörs, Puskás Tivadar út 1.
Company registration number: 13 10 042635
Tax number: 32499959-2-13
Representative: Dávid Csillag, CEO
Phone number: +36 20 778 3839
Email address: hello@unicornct.com
Website: www.unicornct.com

Under Article 37 of the GDPR, our company is currently not obliged to appoint a data protection officer.

Our hosting provider:
DotRoll Kft.
1148 Budapest, Fogarasi út 3-5.
Phone: +36 1 432 3232
Email: support@dotroll.com
Company registration number: 01-09-882068
Tax number: 13962982-2-42
Bank account number (OTP Bank): 11713005-20406563

During the processing of data, our company uses the following data processors to provide high-quality service to our clients:

• DotRoll Kft. (hosting provider)
• Microsoft 365 (email, OneDrive)
• Google Ireland Ltd. (Google Analytics 4)
• Hotjar Ltd. (behavior analysis)
• Mailchimp (newsletter sending)

If the scope of our data processors changes, we will immediately update the amendments in this policy.

For questions related to data processing, please contact us at one of the following addresses: Email: hello@unicornct.com Postal address: H-2040 Budaörs, Puskás Tivadar út 1.

We will send our response within 15 days, but no later than 1 month, to the contact address you have provided.

3. What are cookies and how do we handle them?

Cookies are small data files that are placed on your computer through the website by using the website, saved, and stored by your browser. Most commonly used internet browsers (Chrome, Firefox, Edge, Safari, etc.) accept and allow the use of cookies by default, but you can change your browser settings at any time to refuse or disable the acceptance of cookies, or you can delete already stored cookies. You can find further information on the use of cookies in your browser’s help menu.

There are cookies that do not require your prior consent. Our website provides brief information about these on your first visit, and these include, for example, authentication, session cookies, load-balancing, and user interface customization cookies. For cookies requiring consent—if data processing begins upon visiting the site—our company will inform you on your first visit and ask for your prior, active (opt-in) consent.

Our company does not use or permit any cookies that would collect personal data for third parties without your consent. Accepting cookies is not mandatory, but please note that if you do not enable cookies, our website may not function properly in all its features.

What cookies do we use?

You can obtain further detailed information about the use of third-party cookies from the following official sources:

• NAIH – on the topic of GDPR and cookies
• eu – Cookie Consent and GDPR (guide in Hungarian)
• European Data Protection Board (EDPB) – Guidelines on Consent under GDPR (in English)

4. What else do you need to know about data processing related to our website?

You provide us with personal data by filling out the quote request form or by contacting our company. Please pay close attention to the truthfulness, correctness, and accuracy of the data you provide, as you are responsible for it. Incorrect or incomplete data may hinder the proper use of our services. If you provide the personal data of another person and not your own, we assume that you have the necessary authorization to do so.

You have the right to withdraw your consent to data processing at any time, free of charge, which can be done by:

• deleting the registration,
• withdrawing consent (for example, in the case of data processing for marketing or cookie purposes), or
• withdrawing consent for data processing or requesting the restriction of data.

In the case of data processing based on a legitimate interest, you may object to the data processing; however, please note that in the event of an objection, the related services may no longer be available.

For technical reasons, we will process the withdrawal of consent within 30 days. Please note that for the purpose of fulfilling our legal obligations or enforcing our legitimate interests, we may continue to process certain data even after the withdrawal.

If you provide misleading or false data, or if any of our visitors commits a crime or attacks our system, we are entitled to delete the user’s registration and, if necessary, retain the data for the duration of civil or criminal legal proceedings.

5. Other data processing questions

We will only transfer your data within the framework specified by law. If data is transferred to data processors outside the EEA (for example, in the case of Microsoft 365, Mailchimp, Google Analytics, Hotjar service providers), we will ensure this by applying GDPR contractual guarantees, such as standard contractual clauses (SCC).

Our company complies with its data provision obligation upon the request of courts, prosecutors, and other authorities (e.g., police, tax authority, National Authority for Data Protection and Freedom of Information), by transferring only the amount of data that is appropriate and essential for the purpose of the request.

The contributors and employees involved in data processing and data handling are entitled to process your personal data under an obligation of confidentiality. We protect the data with appropriate technical and organizational measures against unauthorized access, alteration, deletion, damage, or unauthorized disclosure. As part of our organizational measures, we control physical access to our buildings, continuously train our employees, and lock away paper-based documents with appropriate protection. On a technical level, we use encryption, password protection, and antivirus software. However, please note that data transmission over the internet cannot be considered completely secure. To reduce security risks, please keep your access passwords for our website safe and do not share them with anyone.

6. What are your rights and legal remedies?

You are entitled to:

• Request information about the data processing, your personal data, their source, the purpose and legal basis of the data processing, its duration, the data processors and their activities, and data protection incidents.
• Request the rectification, modification, or completion of your personal data processed by us.
• Object to the data processing and request the erasure or restriction of your data (except for legally mandatory data processing).
• Seek judicial remedy.
• Lodge a complaint with the supervisory authority and initiate proceedings.

You can submit your request related to data processing at the following contact details:

Email: hello@unicornct.com
Postal address: H-2040 Budaörs, Puskás Tivadar út 1.
Phone: +36 20 778 3839

Supervisory Authority:

National Authority for Data Protection and Freedom of Information (NAIH)
Registered office: H-1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Mailing address: H-1530 Budapest, Pf.: 5.
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu/

We will respond to requests within 15 days, but no later than 1 month. The information is provided free of charge, unless you have already requested information for the same data set in the given year. In this case, a fee may be charged, which we will refund if the data processing was unlawful or the request led to a rectification. If we do not fulfill your request, or if you do not agree with its rejection, we will inform you in writing or—with your consent—electronically within 15 days about the reasons for the decision, as well as your legal remedies, including lodging a complaint with a court and turning to the supervisory authority.

If you object to the data processing, we will examine it within 15 days and inform you of our decision in writing. If your objection is justified, we will terminate the data processing, restrict the data, and notify those to whom the data was transferred. We may refuse your request if the data processing is justified by compelling legitimate grounds that override your interests and the enforcement of your rights.

Legal proceedings can be initiated at the competent court, which can also be initiated according to the data subject’s place of residence or stay. A foreign citizen can also lodge a complaint with the competent supervisory authority.

Please try to resolve the problem with us before turning to an authority or a court.

7. What are the main governing laws for our activities?

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
• Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Info Act)
• Act V of 2013 on the Civil Code (Ptk.)
• Act CVIII of 2001 on certain issues of electronic commerce services and information society services (Eker tv.)
• Act C of 2003 on electronic communications (Ehtv)
• Act CLV of 1997 on consumer protection (Fogyv tv.)
• Act CLXV of 2013 on complaints and public interest disclosures (Pktv.)
• Act XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activities (Grtv.)

8. Amendment of the Privacy Policy

Our company reserves the right to amend this Privacy Policy from time to time, about which it will inform the data subjects in a manner compliant with applicable law. Current information related to data processing and amendments will be published on the www.unicornct.com website.

August 1, 2025